Effective date: 25 September 2026
Last updated: 15 October 2026

This Privacy Policy explains how Zeet Soft Private Limited ("Zeet Soft", "we", "us" or "our") collects, uses, shares and protects personal information when you visit our websites, use our software products (including BAF ERP and its web and mobile applications), make payments, or communicate with us by email, SMS, phone or WhatsApp (together, the "Services"). By using the Services you agree to the practices described here.

1. Information we collect

Information you give us

  • Contact details such as name, email address, mobile number, organisation name and designation.
  • Account details such as login ID and password (stored only in encrypted or hashed form).
  • For BAF ERP onboarding, date of birth, company logo, optional gender and organisation role/designation, and any birthday-notification preference you choose. Birthday notifications use that preference only when you opt in.
  • Optional latitude and longitude only when you choose to share your location and your browser grants permission; we do not silently collect GPS location during onboarding.
  • Billing details such as billing name, address and tax registration numbers (for example GSTIN).
  • Content you submit, such as enquiries, support requests, feedback and files you upload.

Information collected automatically

  • Device and log data such as IP address, browser type, operating system, pages visited, and date and time of access.
  • Cookies and similar technologies needed to keep you signed in, remember preferences and keep the Services secure.

Information from third parties

  • Payment status and transaction references from our payment partners (never your full card or bank credentials).
  • Message delivery and read status from messaging platforms such as WhatsApp, SMS and email providers.
  • Information shared with us by the organisation (school, college, business) that has registered you on our software.

2. How we use your information

  • To provide, operate, maintain and support the Services and your account.
  • To process orders, payments, invoices and refunds.
  • To send service messages such as one-time passwords (OTP), account alerts, transaction receipts, reminders and support replies.
  • To respond to your enquiries and provide customer support.
  • To send product updates or offers, only where you have agreed to receive them. You can opt out at any time.
  • To keep the Services secure, prevent fraud and abuse, and comply with legal obligations.
  • To understand usage and improve our products, using aggregated or de-identified data where possible.

We process personal information on the basis of your consent, the performance of a contract with you, compliance with law, or our legitimate interest in running and securing the Services.

BAF ERP customer business records and uploads are not used for advertising or marketing profiling. Accepting the BAF ERP acknowledgement does not grant marketing consent. Only authorised staff under confidentiality may access the minimum necessary information for support, security, billing or fixing faults. Diagnostic evidence is limited to relevant timestamps, IP/device identifiers, references and errors; it must not contain passwords, verification codes or full payment credentials.

3. WhatsApp, SMS and email communications

  • We message you on WhatsApp or by SMS only after you have given us your mobile number and agreed to receive such messages (opt-in).
  • Messages are used for OTPs, account and transaction notifications, appointment or fee reminders, support conversations and, where you have agreed, updates about our products.
  • WhatsApp messages are sent through the WhatsApp Business Platform provided by Meta Platforms, Inc. Your use of WhatsApp is also governed by WhatsApp's own terms and privacy policy.
  • You can stop receiving messages at any time by replying STOP, using the unsubscribe link in an email, or writing to [email protected]. Essential security messages (such as OTPs you request) may still be sent.
  • We do not sell, rent or share your phone number or message content with third parties for their own marketing.

4. Payments

Payments are processed by trusted, PCI-DSS compliant payment gateways such as Razorpay and PayPal. Card numbers, CVV, UPI PINs and net-banking credentials are entered directly on the payment partner's secure page and are never stored on our servers. We receive and keep only the information needed to confirm and reconcile the payment, such as the transaction ID, amount, date and status. Your payment data is also handled under the privacy policy of the relevant payment partner.

5. How we share information

We do not sell your personal information. We share it only:

  • With service providers who work on our behalf, such as cloud hosting, payment processing, email, SMS and WhatsApp delivery. They may use it only to provide those services to us.
  • With the organisation that registered you on our software, for the purpose it registered you for.
  • When required by law, court order or government authority, or to protect the rights, property or safety of Zeet Soft, our users or the public.
  • As part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
  • With your consent, in any other case.

BAF ERP hosting, backup, payment and notification processors may use customer data only to provide the contracted service, not for their own marketing. If you choose an AI feature, relevant inputs may be processed by the provider used for that feature, such as Google, OpenAI or Anthropic (Claude), for that service purpose. The restricted service-purpose and no-sale or marketing commitments still apply. Applicable country-specific processor or transfer requirements remain necessary before processing.

6. Cookies

We use cookies that are needed for the Services to work (for example to keep you signed in and to protect forms against abuse) and to understand how the website is used. You can block or delete cookies in your browser settings, but parts of the Services may not work without them.

7. Data retention

We keep personal information only as long as needed for the purposes described in this policy: for as long as your account is active, and afterwards as required by law (for example tax, accounting and audit records). When it is no longer needed we delete or anonymise it.

For BAF ERP, retention is limited to operating the service, investigating incidents, the accepted agreement and billing record, and legal obligations. On permanent closure, we erase customer business records and uploads except limited accounting, tax, security or legal-hold records that law requires us to retain. Retained records remain restricted for the required period. Backup copies may remain beyond use until scheduled expiry or overwrite; we disclose that schedule and prevent their return to ordinary use. We do not promise immediate erasure of every copy. Temporary suspension is not permanent closure.

8. Data security

We use reasonable technical and organisational safeguards, including encryption in transit (HTTPS/TLS), hashed passwords, access controls and restricted administrative access. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires.

9. Your rights and choices

Subject to applicable law, you may:

  • Access the personal information we hold about you and get a summary of how it is used.
  • Correct or update inaccurate or incomplete information.
  • Withdraw consent you have given, including for WhatsApp, SMS and email messages.
  • Ask us to delete your personal information.
  • Nominate another person to exercise these rights on your behalf in case of death or incapacity.
  • Raise a grievance with us and, if unresolved, with the Data Protection Board of India or your local data protection authority.

10. Account and data deletion

To delete your account and associated personal data, email [email protected] from your registered email address with the subject "Data Deletion Request", including your name and registered mobile number or login ID. We will verify your request and complete the deletion within 30 days, except for information we must keep by law, which will be deleted once that period ends. Where your account was created by an organisation (for example your school or employer), we may forward the request to that organisation.

All BAF ERP accounts, including paid accounts, may be scheduled for removal after 100 consecutive days with neither a successful sign-in nor recorded business activity. Before removal, we send two follow-up warning emails to the original verified enquiry contact, stating the final deadline, how to prevent removal and how to export data. We allow a reasonable opportunity to act; contact Support if exports are unavailable. A successful sign-in or recorded business activity before the deadline cancels planned removal. The limited lawful-retention and backup conditions above still apply.

Use the service carefully and keep regular independent backups or exports. Customer-caused accidental deletion may be unrecoverable; reasonable recovery help is offered where available without a restoration guarantee. This does not waive our responsibility for our acts, mandatory security duties or data-protection obligations.

11. Children's privacy

Our Services are not directed at children for their own use. Where our education software processes information about students under 18, it does so on behalf of, and with the verifiable consent obtained by, the school, college or parent concerned. We do not knowingly use children's information for tracking, behavioural monitoring or targeted advertising.

12. International transfers

We are based in India and primarily store data in India. Some service providers may process data in other countries. Where this happens, we take steps to ensure your information remains protected in line with this policy and applicable law.

13. Third-party links

The Services may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows when it was last changed. Where changes are significant, we will notify you through the Services or by email.

Later website changes do not silently replace a BAF ERP acknowledgement already accepted. Material commercial changes require notice and new acceptance. No acknowledgement or policy waives non-excludable consumer, privacy or data-protection rights, authorises unlawful processing or excuses negligent security.

15. Contact us and grievance officer

For any question, request or complaint about this policy or your personal information, contact our Grievance Officer in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

Zeet Soft Private Limited
Attn: Grievance Officer
Email: [email protected]
General enquiries: [email protected]
Website: zeetsoft.com

We acknowledge grievances within 48 hours and aim to resolve them within 30 days.